Vulnary
← back to the feed
Critical· 10official fix available

CVE-2026-16498

The vulnerability CVE-2026-16498 affects terraform-mcp-server versions earlier than 1.1.0. It allows a malicious user to reuse another user’s Terraform token to run tool calls on that user’s behalf. The issue is fixed in version 1.1.0 and later.

publishedJul 28, 2026
last modifiedJul 28, 2026
sourcesNVD
severity · cvss
10
critical · how bad it is
exploitation · epss
<1%
26th percentile · chance of exploitation in 30 days
(ai-assisted) A model wrote this summary from the official data, so double-check it against the source before you act on it. Read the official advisory →
auto-deletes from the system
counting…on Aug 27, 2026

An official fix is available, so this entry is kept for 30 days and then removed automatically.

01

Who is affected

Users of terraform-mcp-server before version 1.1.0, typically DevOps engineers and Terraform administrators who rely on the streamable-HTTP stateless transport mode.

02

Real-world impact

An attacker who gains access to a Terraform token can hijack the token to perform actions as other users, potentially executing unauthorized tool calls and accessing sensitive resources.

03

Why this severity

The CVSS score of 10 reflects that the flaw can be exploited over the network with no authentication, no user interaction, and a low attack complexity. The vulnerability changes the scope of the affected system, and it compromises confidentiality and integrity at a high level while only slightly affecting availability.

04

What to do about it

official fix available
recommended steps
  1. 01Upgrade terraform-mcp-server to version 1.1.0 or later.
  2. 02Restart the terraform-mcp-server service to apply the update.

NVD-referenced vendor advisory

05

Timeline

  1. Jul 28, 2026 · 2d ago
    Published
    Disclosed and added to the National Vulnerability Database.
  2. Jul 28, 2026 · 2d ago
    Official fix available
    A vendor patch or mitigation now exists — see the remediation steps above.
06

How it’s attacked

Attack vectorNetwork (remote)
Attack complexityLow
Privileges requiredNone
User interactionNone needed
ScopeChanged
Confidentiality impactHigh
Integrity impactHigh
Availability impactLow
07

References & advisories

(ai-assisted) A model wrote this summary from the official data, so double-check it against the source before you act on it. Read the official advisory →